2f121f3458e40caffeaf849293a6532c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f121f3458e40caffeaf849293a6532c_JaffaCakes118
Size

538KB
MD5

2f121f3458e40caffeaf849293a6532c
SHA1

6c4bfe13053c8fe70ea0b066a3d8ca6980badb45
SHA256

e59f07567fb4c0851f3f3f3ff8558ec5aeaede1513ec4cf0e697d4de0692bb4b
SHA512

ce4ec31d981d8d1565039a4b46b0d76292eac7512b6f5175bd926a8dd47f82c7a747e800f843ee97c2e36917aea909aa40a9db7c6d2f783b5b24d47b0408eb13
SSDEEP

12288:76DNoVyxH8R2qkBM9rPwFRiMoa2U2y5vTSssrILIs7kQj:uDNoVDUqkBM9EFRfoBPyV8rxs7kQj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f121f3458e40caffeaf849293a6532c_JaffaCakes118

Files

2f121f3458e40caffeaf849293a6532c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

c:\bld_area\InstallToolBox_r5.7\bin\bin.iru\MiniStub.pdb

Sections

.text
Size: 431KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ